Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa
File:                     4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa (raw, json)
Hash identifier:          V1hnW+5Bue8JE9bh5IxB1UrhDZ8TIzVbIZHDsTxRNXQ=
Subject key identifier:   FD:B1:C9:B5:EA:7E:5C:E8:A2:0F:1C:9C:E7:47:BE:B1:3B:56:91:D3
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584F3FAD8D0AC32AEFD76B763ADC
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6079
IP address blocks:        172.111.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:8d:0a:c3:2a:ef:d7:6b:76:3a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=c0552850-4505-48ab-9464-fefa541ad998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:a5:c3:53:a0:b0:07:e2:89:e7:76:b2:75:
                    5e:ab:f2:54:61:08:d8:20:48:4f:00:0d:17:2c:51:
                    c3:3a:1d:d4:fc:cf:3b:c9:83:57:05:ed:16:e0:55:
                    13:e1:f5:5a:95:21:ed:93:75:87:b7:09:8a:0d:d8:
                    50:9c:40:c1:49:b4:c0:24:e3:bd:97:38:84:14:f8:
                    39:1b:d9:6b:b2:02:ff:eb:06:fc:62:6e:9e:3e:1f:
                    bd:5b:52:cb:ee:99:66:e5:82:fa:3d:11:c8:9f:5a:
                    80:b5:7c:73:fe:98:4d:7d:72:90:b3:09:9a:6a:fd:
                    9a:1b:0d:27:b5:e1:72:29:b6:98:8c:ce:4b:0e:70:
                    59:e4:20:df:cd:b9:3b:11:08:2c:53:ee:66:dd:61:
                    75:82:de:4b:6a:c9:a2:35:84:45:03:a2:ee:dc:4e:
                    0c:3e:db:9e:aa:d7:d2:1b:d9:e7:b5:7d:29:5c:23:
                    2d:c2:e9:eb:5c:5a:70:d0:fc:ca:d0:c8:82:f9:81:
                    c1:a1:27:69:58:1c:c7:af:71:e3:ce:de:25:18:b1:
                    bd:c2:39:9d:e7:73:ce:fd:e8:3c:a6:c4:f8:1e:83:
                    af:d1:60:0c:47:4f:a8:64:4b:ac:5d:59:19:65:e7:
                    d7:52:6f:d2:f1:65:fe:68:58:e7:0e:0e:07:0f:c7:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B1:C9:B5:EA:7E:5C:E8:A2:0F:1C:9C:E7:47:BE:B1:3B:56:91:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:08:36:0e:ac:e8:9c:a0:82:20:a0:75:7b:b2:5f:3c:b3:86:
         9c:e7:68:5f:ac:17:32:f6:6b:d5:db:fb:ff:c7:91:2c:94:7d:
         47:9f:ea:0d:33:8a:30:88:41:f5:81:d4:be:12:14:4f:84:e8:
         f2:da:36:ba:6f:30:c6:e8:9c:60:68:27:f7:76:0f:75:96:24:
         9a:d5:c5:8d:75:22:7d:81:9d:5a:be:fe:1c:5e:c6:76:ec:05:
         64:c4:f4:86:8a:75:ef:ee:9b:90:f0:32:c7:25:65:8b:37:b4:
         39:70:6b:41:e3:1d:8d:70:94:32:00:83:f7:d4:9d:e1:be:78:
         44:ec:e6:04:b5:e0:55:c0:1a:34:fb:08:a3:4f:46:26:5b:c0:
         de:2f:bb:82:01:13:fc:11:23:a8:73:2d:d6:0b:f4:92:f2:ae:
         e5:05:a8:2e:f8:f5:35:81:1d:35:ab:bf:c0:33:a5:27:b6:1b:
         b4:30:56:d2:87:c7:66:f6:fa:2b:8b:f3:09:83:f8:5c:98:37:
         f1:e9:2b:c3:3a:e8:f8:0d:e9:64:3d:bc:ee:b8:36:bd:ad:13:
         fe:ae:18:77:7a:16:07:ff:a9:d0:a2:cd:0b:56:95:36:40:5d:
         71:c2:09:08:20:2c:89:62:c9:75:e9:2c:68:ba:46:45:44:98:
         3e:6d:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:18:19 2026 by rpki-client